Cyber crime
is a highly
organized
and
technically
sophisticated
global
business
that is
constantly
evolving to
take
advantage of
the
weaknesses
in the
interactions
of
technology,
business
process and
human
behavior.While
Corporate
Information
Services
spends
hundreds of
thousands of
dollars
annually to
protect Old
Republic
National
Title
Insurance
Company
networks and
business
computers
from these
threats, the
most
effective
defense
against
criminal
exploits is
an informed
and alert
user
community.

The July 30
email from
the
Corporate
Legal
department
raised
attention to
a prevalent
threat aimed
at financial
services
organizations
of all
sizes,
engaged in
on-line
banking
transactions
and money
transfer
activities,
the Zeus
botnet.

A botnet is
a collection
of software
agents
designed to
be
unknowingly
installed on
targeted
host systems
like web
servers or
workstations.Once
installed,
an operator
controls the
implanted
software
remotely
turning the
host system
into a
"robot" or
bot for the
operator.This
software,
upon
command,
will provide
the operator
with
preprogrammed
information
designed to
be harvested
from the
host
computer
system.The
Zeus botnet
is
specifically
designed to
provide
information
needed to
initiate and
complete on
line banking
transactions
to the bot
operator,
allowing
real time
access to
secured
financial
assets.

There is no
single
action that
will prevent
a bot
attack.The
list below
is a
combination
of
activities
that can
reduce the
likelihood
of you
becoming the
unknowing
participant
in an
attack.

Preventive
Practices:

Before
beginning
any
financial
transaction
(wire
transfer
or ACH)
check
that the
anti-virus
software
on your
PC is
active.

Do not open
suspicious
emails
or
attachments
or
follow
links
that
direct
you to
websites
with
which
you are
not
familiar.

Do not
keep
your
internet
browser
open for
extended
periods
when not
in use.

If you
detect
unusual
application
behavior
during a
wire
transfer
session,
for
example
the
session
hangs or
the
screen
goes
blank,
terminate
the
session
immediately.This can
be done
by
powering
off the
computer
or
disconnecting
the
network
cable
from the
back of
the PC.Do not
leave a
session
unattended
or in an
incomplete
status.

Use two
separate
workstations
to
initiate
and
release
outgoing
fund
transfer
authorizations.

Minimize
the
amount
of web
browsing
done
from
computers
that are
used for
electronic
wire
transactions.The less
visibility
to
internet
websites
the less
likelihood
of
acquiring
malware.

Please contact
Sue Morgan at Old Republic Title with any
questions or give us a call at 610-687-8020 or
800-842-2080.

Old Republic Title Update is published by the Mid-Atlantic Area Office of Old Republic National Title Insurance Company in an effort to provide information relative to our industry on a timely basis. None of the materials included in this publication should be deemed legal or underwriting advice or should be acted upon without prior consultation with your underwriter or counsel.